Home/ Questions/Q 706255
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-14T04:08:44+00:00

I am used to developing in PHP/MySQL and have no experience developing with SQL

  • 0

I am used to developing in PHP/MySQL and have no experience developing with SQL Server. I’ve skimmed over the PHP MSSQL documentation and it looks similar to MySQLi in some of the methods I read about.

For example, with MySQL I utilize the function mysql_real_excape_string(). Is there a similar function with PHP/SQL Server?

What steps do I need to take in order to protect against SQL injection with SQL Server?

What are the differences between SQL Server and MySQL pertaining to SQL injection prevention?

also – is this post accurate? is the escape string character for SQL Server a single quote?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Use PDO and parameterized queries and every database engine looks almost the same.

    • 0